RE: Website search engine is a hacking tool..

From: Vinicius Moreira Mello (vinicius@lineone.net)
Date: Thu Jul 29 2004 - 22:15:44 EDT

Next message: Max Enders: "Re: Testing F5 3DNS"
Previous message: Philippe Biondi: "Re: Testing F5 3DNS"
In reply to: Amal Mohammad Al Hajeri: "RE: Website search engine is a hacking tool.."
Next in thread: Mark Curphey: "RE: Website search engine is a hacking tool.."
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Hi,

>-- Original Message --
>Subject: RE: Website search engine is a hacking tool..
>From: Amal Mohammad Al Hajeri <amal@nis.etisalat.ae>
>
> and how can we mitigate the risk of using such techniques? did anyone
succeed in using
>the local search engine as a proxy to attack other targets?

Try disabling indexing (apache: Option -Indexes) for as much directories
as possible and not using/protecting critical files under the webserver
(ch)root diretory.

Regards,
vmm.

__________________________________________________________________
Get Tiscali Broadband From £15:99
http://www.tiscali.co.uk/products/broadband

Next message: Max Enders: "Re: Testing F5 3DNS"
Previous message: Philippe Biondi: "Re: Testing F5 3DNS"
In reply to: Amal Mohammad Al Hajeri: "RE: Website search engine is a hacking tool.."
Next in thread: Mark Curphey: "RE: Website search engine is a hacking tool.."
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:53:58 EDT